← Database

CVE-2022-37706

HIGH CVSS: 7.8 Published: 2022-12-25 Modified: 2026-06-17

Description

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Affected Platforms

Enlightenment Enlightenment

Weakness Type

CWE-269, CWE-269

References